ledger

According to CoinDesk, Ripple's XRP Ledger lending system designed for banks and payment companies has gained support from 3 additional validators since mid-October, bringing the total votes to 22, still 7 votes short of the 29 required to launch. Both the system and its accompanying SingleAssetVault amendment need to obtain 29 votes each within two consecutive weeks to activate.As of Wednesday's data, "LendingProtocol" and its first patch each have 22 votes in support, while the "SingleAssetVault" for creating a funding pool has 23 votes. The design requires depositors to deposit XRP or other tokens into the vault, which loan brokers lend out for a fixed term, with borrowers not needing to provide collateral; the system relies on off-chain underwriting and risk management. Additionally, developers are still advancing related work before the voting, with a code merge request planned for November 4 to add a third lending amendment.

The XRP Ledger Foundation's 2027 roadmap outlines the anti-quantum signature amendment, planning to first study migration solutions, and then advance development and auditing.

According to CoinDesk, the privacy public chain Midnight has upgraded its mainnet to Ledger 9, adding support for privacy asset transfers, introducing inter-contract call execution features, and new cryptographic standards such as Keccak-256 and ECDSA.

According to Lookonchain monitoring, the hacker who tampered with the Ledger hardware wallets sold by the Southeast Asian dealer CryptoBilis deposited 885 ETH into Tornado Cash 2 hours ago, worth approximately 2.14 million USD.

According to CoinDesk, the XRP Ledger activated a fix named fixCleanup3_4_0 at 22:52 Beijing time on November 4. This fix addressed a vulnerability: certain accounts that were originally only authorized to "burn" tokens issued by the issuer could, under specific conditions, also create new tokens. This vulnerability affected the network's permissioned delegation system, for example, stablecoin issuers could authorize payment processors to burn tokens when customers redeem them, but did not grant them the authority to create new tokens; under the old rules, accounts with limited burn permissions could mint tokens simultaneously.The vulnerability affected assets issued on the XRP Ledger, including stablecoins, but did not impact XRP itself, and there are currently no publicly confirmed exploitation cases. This fix also included accounting corrections for the planned lending system and Single Asset Vaults, as well as corrections related to automatic trading pool token recovery, permissioned transactions, and transaction signatures. The activation was completed after two consecutive weeks of support following an interruption in validator support in October.

A proposal for token permissions on the XRP Ledger is expected to be activated on Wednesday. This proposal currently has the support of 33 out of 35 trusted validators.Meanwhile, a related independent proposal aimed at preventing unauthorized token holders is still under review and has not yet entered the activation phase.

According to an announcement from the Singapore Police Force's official website, the Singapore police have issued a warning stating that since September 10, they have received at least two reports related to tampered Ledger cryptocurrency hardware wallets, with total losses amounting to approximately 3.5 million Singapore dollars. Preliminary investigations indicate that some Ledger hardware wallets purchased at retail stores in Singapore contained malicious hardware components that could steal users' mnemonic phrases or private keys, and transfer assets without the users' knowledge.The police have contacted Ledger, which is reviewing the related cases, and the investigation is ongoing. The police advise users to stop using suspected tampered devices and to generate new mnemonic phrases with unaffected devices, transferring any remaining assets. Zhao Changpeng shared this news on the X platform, reminding Singapore users to be especially cautious.

According to a notice from the global securities financing technology company EquiLend, Goldman Sachs has begun using its distributed ledger platform 1Source built on the Canton Network, joining the ranks of Bank of New York Mellon and National Bank of Canada.The platform aims to reduce issues such as duplicate reconciliation, inconsistent transaction records, and settlement failures between traditional financial institutions by synchronizing securities lending transactions and subsequent changes through a shared ledger. Bank of New York Mellon and National Bank of Canada started transmitting real transaction data to the platform in October 2025.

The Singapore Police Force issued a warning on Wednesday, stating that since September 10, they have received at least two reports involving tampered Ledger hardware wallets, resulting in a total loss of approximately 3.5 million Singapore dollars, equivalent to about 2.7 million US dollars. Preliminary investigations found malicious hardware components in Ledger wallets purchased from certain retail stores in Singapore.The incident only came to public attention on October 9, involving devices sold through authorized dealers CryptoBilis in Indonesia, Malaysia, and the Philippines. Subsequently, former Mt. Gox CEO Mark Karpelès stated that a Ledger Flex purchased at Singapore airport contained a spy implant. Another user reported acquiring a tampered device from local IT retailer Challenger, and later received a new device sent by Ledger.On October 13, Ledger requested retailers in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales of their devices pending the completion of the investigation. The Singapore police stated they are in contact with Ledger, which is reviewing the affected cases, and the police investigation is ongoing.

According to CoinDesk, XRP Ledger developers are testing a new feature that aims to allow the creation of blockchain accounts with an initial balance of zero, with existing accounts bearing the reserve required for new accounts, thereby lowering the financial threshold for payment applications and automated software to create wallets on a large scale. This proposal was submitted on October 15 in the form of a SponsoredAccountCreate transaction proposal.According to current XRP Ledger rules, each account must reserve at least 1 XRP as a reserve, meaning that creating 100,000 independent accounts would require locking up 100,000 XRP. The new proposal intends for sponsored accounts to bear this reserve requirement, and a broader fee sponsorship mechanism in the future could also allow applications to pay transaction fees on behalf of users, but the overall reserve requirement for the network will not be eliminated. This feature is expected to lower the usage threshold for scenarios such as embedded wallets, RLUSD stablecoin payments, and AI agent automated payments.However, the related code is still under review, and the sponsorship mechanism it relies on has not yet gone live on the mainnet. As of October 19, the mechanism has only received 11 votes out of the 35 required validator votes, still falling short of the 29 votes needed for approval.

According to Salus monitoring, the CryptoBilis attackers deposited 1,200 ETH, approximately 2.78 million USD, into Tornado Cash on October 27, 18 days after a large-scale wallet theft incident. Ledger confirmed on October 11 that there was an unauthorized hardware implant in one victim's device.The attackers used wallet 0x468b...2a4e to send 600.1 ETH to two new wallets, which then made parallel deposits, completing a total of 12 deposits of 100 ETH each between 14:24:59 and 14:27:23 UTC. The theft on October 9 affected users who purchased Ledger devices through the Southeast Asian dealer CryptoBilis, with Bitquery estimating losses of approximately 102 million USD across multiple chains.

Ripple announced that Aviva Investors, the asset management company under the UK insurance group Aviva, has launched tokenized shares of the Aviva Investors Sterling (GBP) Liquidity Fund on the XRP Ledger. The fund has an asset management scale of approximately £22 billion, making it the largest fund of Aviva Investors; this is the second existing fund to complete tokenization after the company launched the tokenized shares of the US dollar liquidity fund in July 2026.Currently, the total investment in the two tokenized shares exceeds $116 million, with Aviva having invested $66 million in the new shares. The fund is a UCITS money market fund registered in Ireland, utilizing a "digital twin" model that maps holdings on-chain while maintaining an off-chain fund structure; the underlying assets are custodied by BNY Mellon, with Komainu and Licuido providing digital asset custody and tokenization platform support, open to qualified investors holding digital wallets.

According to CoinDesk, asset management giant Franklin Templeton recently added approximately 150 million dollars worth of tokenized money market fund shares to the XRP Ledger (XRPL), increasing the total supply of sgBENJI tokens on the network from about 48 million to 193 million.Based on the transaction record of 1.039 dollars per share, the total value is approximately 200 million dollars.

According to CoinDesk, the patch for the XRP Ledger vulnerability was delayed until November as the number of validator supports dropped to 26 (out of a total of 35), resetting the countdown timer for its effectiveness.Currently, the number of supports has risen back to 31, but due to the need to recalculate the two-week countdown, this fix has missed the originally impending effectiveness window.

Ledger Wallet officially launches the Crypto Loan feature, allowing users to directly use the Morpho open credit network for lending operations within the Ledger Wallet. The core of this feature is that users can use Wrapped Bitcoin (wBTC) or cbBTC as collateral to borrow stablecoins such as USDC or USDT without selling their assets.This integration brings hardware-level security standards into the DeFi lending space. All lending activities are physically confirmed through Ledger Signer, ensuring that every on-chain interaction from deposit to loan has clear signatures and hardware-level security guarantees. During the lending process, users' collateral remains in Morpho's smart contracts, with Ledger acting solely as a technology provider.Morpho is an open credit network running on Ethereum and major Layer 2s, providing flexible lending markets through infrastructures like Morpho Blue and Morpho Midnight. This feature supports operations such as adding collateral, repaying, increasing loan limits, and withdrawals. It is important to note that this service uses floating interest rates and carries liquidation risks, and users should pay attention to the specific supported countries and lending terms.

The Starknet Foundation announced the launch of the Bramble wallet, which integrates the STRK20 shielding feature, allowing users to hold privacy balances.Bramble is a wallet that only supports the Chrome browser, integrating privacy balances, Ledger hardware signing, and multi-signature account features, and provides recovery mnemonic phrases for backup.

The XRP Ledger vulnerability fix package named fixCleanup3_4_0 is expected to officially take effect around 09:34 UTC on October 23. This fix package has received votes from 29 validators, surpassing the threshold of over 80% approval among the network's default 35 validators, and must be maintained continuously for two weeks. The countdown has been ongoing for nine days. Since there is no margin in the vote count, if any validator withdraws support, the countdown will restart.This fix package partially addresses the unsecured lending system that Ripple has been promoting to banks and payment companies since June, but this system has not yet been activated. Currently, the lending amendment has only 19 votes, and the vault amendment for holding funds has 21 votes, neither of which has started the countdown. Therefore, even if both reach 29 votes today, the lending function will not be available until early November at the earliest.As designed, lenders will deposit XRP or other tokens into the vault, and loan brokers will then lend out the funds for a fixed term. The ledger is responsible for recording the loans and tracking repayments, while brokers assess the borrower's qualifications off-chain. Since borrowers do not need to provide collateral, the broker's judgment becomes the only guarantee for lenders against default losses. Ripple has promoted this scheme to payment companies that need liquidity during cross-border settlement. Additionally, the fix package also closes a vulnerability that allowed accounts authorized to destroy tokens to create new tokens under specific conditions and adjusts the rounding of vault amounts as well as the rules for determining loan overdue and default.

Clearpool announced the 2026 v4 protocol whitepaper and stated that its institutional credit market has been operating on multiple EVM-compatible networks and is further expanding to the XRP Ledger. The whitepaper reveals that the institutional credit protocol will collaborate with Ripple and Cicada Partners to expand to the XRP Ledger for the settlement of the regulated stablecoin RLUSD, and will migrate the token from CPOOL to the new token CLEAR at a 1:1 ratio.The total supply of CLEAR is 1.429 billion tokens, with 1.125 billion tokens in circulation at the time of migration, accounting for 78.75%; this migration and the XRPL expansion have been approved through Snapshot voting, with a support rate of 97.16%. Since its operation began in 2021, the protocol has issued loans totaling approximately $965 million, with borrowers including Jane Street, Flow Traders, and Wintermute, and currently supports six EVM chains. 50% of the protocol fees will be used for open market repurchases and permanent destruction of CLEAR. XRPL products are preparing for testing on Devnet.

Former Mt. Gox CEO Mark Karpelès questioned Ledger Support's previous statements. Ledger customer service had claimed that the secure element could detect physical tampering, and if additional hardware attempted to intercept signals, it would not pass authenticity verification. Karpelès pointed out that Ledger's own documentation states that if the original secure element is intact, authenticity verification cannot detect unauthorized physical modifications such as spy implants, which directly contradicts the customer service claims.Mark Karpelès stated that reports have shown that over $90 million has been stolen due to such "additional hardware" intercepting signals less than two months later, and that Ledger had published photos of spy implants for multiple models in a March 2026 academic article. Given the known threats, assuring users that authenticity verification can detect such modifications may constitute misleading advertising.